tocsin

Debian/cacti: unknown

Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the (1) graph_list parameter to graph

Action: Upgrade cacti to 0.8.7b-1 or later.

Affected

introducedfixedlast affected
00.8.7b-1-

Fixed versions

0.8.7b-1

Sources

published · modified · JSON